About this Report
On July 26, 2023, the SEC’s final rules on cybersecurity disclosure were released. The final rules are narrower, and the requirements streamlined over what was proposed in March 2022 while still imposing significant new requirements on registrants. The final rules will become effective 30 days after publication in the Federal Register, with compliance deadlines ranging from 90 to 270 days. Foreign private issuers must also comply with similar disclosure requirements and furnish information on material cybersecurity incidents reported in foreign jurisdictions.